@cloud-copilot/iam-data

{ "acceptnetworkfirewalltransitgatewayattachment": { "name": "AcceptNetworkFirewallTransitGatewayAttachment", "description": "Grants permission to accept pending Network Firewall attachments on a transit gateway", "accessLevel": "Write", "resourceTypes": [ { "name": "Firewall", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "associateavailabilityzones": { "name": "AssociateAvailabilityZones", "description": "Grants permission to associate availability zones to a firewall", "accessLevel": "Write", "resourceTypes": [ { "name": "Firewall", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "associatefirewallpolicy": { "name": "AssociateFirewallPolicy", "description": "Grants permission to create an association between a firewall policy and a firewall", "accessLevel": "Write", "resourceTypes": [ { "name": "Firewall", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "FirewallPolicy", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "associatesubnets": { "name": "AssociateSubnets", "description": "Grants permission to associate VPC subnets to a firewall", "accessLevel": "Write", "resourceTypes": [ { "name": "Firewall", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createfirewall": { "name": "CreateFirewall", "description": "Grants permission to create an AWS Network Firewall firewall", "accessLevel": "Write", "resourceTypes": [ { "name": "Firewall", "required": true, "conditionKeys": [], "dependentActions": [ "iam:CreateServiceLinkedRole" ] }, { "name": "FirewallPolicy", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createfirewallpolicy": { "name": "CreateFirewallPolicy", "description": "Grants permission to create an AWS Network Firewall firewall policy", "accessLevel": "Write", "resourceTypes": [ { "name": "FirewallPolicy", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "StatefulRuleGroup", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "StatelessRuleGroup", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "TLSInspectionConfiguration", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createrulegroup": { "name": "CreateRuleGroup", "description": "Grants permission to create an AWS Network Firewall rule group", "accessLevel": "Write", "resourceTypes": [ { "name": "StatefulRuleGroup", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "StatelessRuleGroup", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createtlsinspectionconfiguration": { "name": "CreateTLSInspectionConfiguration", "description": "Grants permission to create an AWS Network Firewall tls inspection configuration", "accessLevel": "Write", "resourceTypes": [ { "name": "TLSInspectionConfiguration", "required": true, "conditionKeys": [], "dependentActions": [ "iam:CreateServiceLinkedRole" ] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createvpcendpointassociation": { "name": "CreateVpcEndpointAssociation", "description": "Grants permission to create an AWS Network Firewall vpc endpoint association", "accessLevel": "Write", "resourceTypes": [ { "name": "Firewall", "required": true, "conditionKeys": [], "dependentActions": [ "iam:CreateServiceLinkedRole" ] }, { "name": "VpcEndpointAssociation", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "deletefirewall": { "name": "DeleteFirewall", "description": "Grants permission to delete a firewall", "accessLevel": "Write", "resourceTypes": [ { "name": "Firewall", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletefirewallpolicy": { "name": "DeleteFirewallPolicy", "description": "Grants permission to delete a firewall policy", "accessLevel": "Write", "resourceTypes": [ { "name": "FirewallPolicy", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletenetworkfirewalltransitgatewayattachment": { "name": "DeleteNetworkFirewallTransitGatewayAttachment", "description": "Grants permission to delete Network Firewall attachments on a transit gateway", "accessLevel": "Write", "resourceTypes": [ { "name": "Firewall", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteresourcepolicy": { "name": "DeleteResourcePolicy", "description": "Grants permission to delete a resource policy for a firewall policy or rule group or firewall", "accessLevel": "Write", "resourceTypes": [ { "name": "Firewall", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "FirewallPolicy", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "StatefulRuleGroup", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "StatelessRuleGroup", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleterulegroup": { "name": "DeleteRuleGroup", "description": "Grants permission to delete a rule group", "accessLevel": "Write", "resourceTypes": [ { "name": "StatefulRuleGroup", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "StatelessRuleGroup", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletetlsinspectionconfiguration": { "name": "DeleteTLSInspectionConfiguration", "description": "Grants permission to delete a tls inspection configuration", "accessLevel": "Write", "resourceTypes": [ { "name": "TLSInspectionConfiguration", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletevpcendpointassociation": { "name": "DeleteVpcEndpointAssociation", "description": "Grants permission to delete a vpc endpoint association", "accessLevel": "Write", "resourceTypes": [ { "name": "VpcEndpointAssociation", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describefirewall": { "name": "DescribeFirewall", "description": "Grants permission to retrieve the data objects that define a firewall", "accessLevel": "Read", "resourceTypes": [ { "name": "Firewall", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describefirewallmetadata": { "name": "DescribeFirewallMetadata", "description": "Grants permission to retrieve the high-level information about a firewall", "accessLevel": "Read", "resourceTypes": [ { "name": "Firewall", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describefirewallpolicy": { "name": "DescribeFirewallPolicy", "description": "Grants permission to retrieve the data objects that define a firewall policy", "accessLevel": "Read", "resourceTypes": [ { "name": "FirewallPolicy", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "StatefulRuleGroup", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "StatelessRuleGroup", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "TLSInspectionConfiguration", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeflowoperation": { "name": "DescribeFlowOperation", "description": "Grants permission to describe a flow operation performed on a firewall", "accessLevel": "Read", "resourceTypes": [ { "name": "Firewall", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describeloggingconfiguration": { "name": "DescribeLoggingConfiguration", "description": "Grants permission to describe the logging configuration of a firewall", "accessLevel": "Read", "resourceTypes": [ { "name": "Firewall", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [ "logs:GetLogDelivery", "logs:ListLogDeliveries" ] }, "describeresourcepolicy": { "name": "DescribeResourcePolicy", "description": "Grants permission to describe a resource policy for a firewall policy or rule group or firewall", "accessLevel": "Read", "resourceTypes": [ { "name": "Firewall", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "FirewallPolicy", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "StatefulRuleGroup", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "StatelessRuleGroup", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describerulegroup": { "name": "DescribeRuleGroup", "description": "Grants permission to retrieve the data objects that define a rule group", "accessLevel": "Read", "resourceTypes": [ { "name": "StatefulRuleGroup", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "StatelessRuleGroup", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describerulegroupmetadata": { "name": "DescribeRuleGroupMetadata", "description": "Grants permission to retrieve the high-level information about a rule group", "accessLevel": "Read", "resourceTypes": [ { "name": "StatefulRuleGroup", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "StatelessRuleGroup", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describetlsinspectionconfiguration": { "name": "DescribeTLSInspectionConfiguration", "description": "Grants permission to retrieve the data objects that define a tls inspection configuration", "accessLevel": "Read", "resourceTypes": [ { "name": "TLSInspectionConfiguration", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "describevpcendpointassociation": { "name": "DescribeVpcEndpointAssociation", "description": "Grants permission to retrieve the data objects that define a vpc endpoint association", "accessLevel": "Read", "resourceTypes": [ { "name": "VpcEndpointAssociation", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "disassociateavailabilityzones": { "name": "DisassociateAvailabilityZones", "description": "Grants permission to disassociate availability zones to a firewall", "accessLevel": "Write", "resourceTypes": [ { "name": "Firewall", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "disassociatesubnets": { "name": "DisassociateSubnets", "description": "Grants permission to disassociate VPC subnets from a firewall", "accessLevel": "Write", "resourceTypes": [ { "name": "Firewall", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getanalysisreportresults": { "name": "GetAnalysisReportResults", "description": "Grants permission to retrieve analysis report results of a firewall", "accessLevel": "Read", "resourceTypes": [ { "name": "Firewall", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listanalysisreports": { "name": "ListAnalysisReports", "description": "Grants permission to list firewall analysis reports", "accessLevel": "List", "resourceTypes": [ { "name": "Firewall", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listfirewallpolicies": { "name": "ListFirewallPolicies", "description": "Grants permission to retrieve the metadata for firewall policies", "accessLevel": "List", "resourceTypes": [ { "name": "FirewallPolicy", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listfirewalls": { "name": "ListFirewalls", "description": "Grants permission to retrieve the metadata for firewalls", "accessLevel": "List", "resourceTypes": [ { "name": "Firewall", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listflowoperationresults": { "name": "ListFlowOperationResults", "description": "Grants permission to list results from a flow operation performed on a firewall", "accessLevel": "Read", "resourceTypes": [ { "name": "Firewall", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listflowoperations": { "name": "ListFlowOperations", "description": "Grants permission to list flow operations performed on a firewall", "accessLevel": "List", "resourceTypes": [ { "name": "Firewall", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listrulegroups": { "name": "ListRuleGroups", "description": "Grants permission to retrieve the metadata for rule groups", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "listtlsinspectionconfigurations": { "name": "ListTLSInspectionConfigurations", "description": "Grants permission to retrieve the metadata for tls inspection configurations", "accessLevel": "List", "resourceTypes": [ { "name": "TLSInspectionConfiguration", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listtagsforresource": { "name": "ListTagsForResource", "description": "Grants permission to retrieve the tags for a resource", "accessLevel": "List", "resourceTypes": [ { "name": "Firewall", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "FirewallPolicy", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "StatefulRuleGroup", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "StatelessRuleGroup", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "TLSInspectionConfiguration", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "VpcEndpointAssociation", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "listvpcendpointassociations": { "name": "ListVpcEndpointAssociations", "description": "Grants permission to retrieve the metadata for vpc endpoint associations", "accessLevel": "List", "resourceTypes": [ { "name": "VpcEndpointAssociation", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "putresourcepolicy": { "name": "PutResourcePolicy", "description": "Grants permission to put a resource policy for a firewall policy or rule group or firewall", "accessLevel": "Write", "resourceTypes": [ { "name": "Firewall", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "FirewallPolicy", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "StatefulRuleGroup", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "StatelessRuleGroup", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "rejectnetworkfirewalltransitgatewayattachment": { "name": "RejectNetworkFirewallTransitGatewayAttachment", "description": "Grants permission to reject pending Network Firewall attachments on a transit gateway", "accessLevel": "Write", "resourceTypes": [ { "name": "Firewall", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "startanalysisreport": { "name": "StartAnalysisReport", "description": "Grants permission to start an analysis report on a firewall", "accessLevel": "Write", "resourceTypes": [ { "name": "Firewall", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "startflowcapture": { "name": "StartFlowCapture", "description": "Grants permission to start capture operation on a firewall", "accessLevel": "Write", "resourceTypes": [ { "name": "Firewall", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "startflowflush": { "name": "StartFlowFlush", "description": "Grants permission to start flush operation on a firewall", "accessLevel": "Write", "resourceTypes": [ { "name": "Firewall", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "tagresource": { "name": "TagResource", "description": "Grants permission to attach tags to a resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "Firewall", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "FirewallPolicy", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "StatefulRuleGroup", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "StatelessRuleGroup", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "TLSInspectionConfiguration", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "VpcEndpointAssociation", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "untagresource": { "name": "UntagResource", "description": "Grants permission to remove tags from a resource", "accessLevel": "Tagging", "resourceTypes": [ { "name": "Firewall", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "FirewallPolicy", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "StatefulRuleGroup", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "StatelessRuleGroup", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "TLSInspectionConfiguration", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "VpcEndpointAssociation", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:TagKeys" ], "dependentActions": [] }, "updateavailabilityzonechangeprotection": { "name": "UpdateAvailabilityZoneChangeProtection", "description": "Grants permission to add or remove availability zone change protection for a firewall", "accessLevel": "Write", "resourceTypes": [ { "name": "Firewall", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatefirewallanalysissettings": { "name": "UpdateFirewallAnalysisSettings", "description": "Grants permission to modify firewall analysis settings of a firewall", "accessLevel": "Write", "resourceTypes": [ { "name": "Firewall", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatefirewalldeleteprotection": { "name": "UpdateFirewallDeleteProtection", "description": "Grants permission to add or remove delete protection for a firewall", "accessLevel": "Write", "resourceTypes": [ { "name": "Firewall", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatefirewalldescription": { "name": "UpdateFirewallDescription", "description": "Grants permission to modify the description for a firewall", "accessLevel": "Write", "resourceTypes": [ { "name": "Firewall", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatefirewallencryptionconfiguration": { "name": "UpdateFirewallEncryptionConfiguration", "description": "Grants permission to modify the encryption configuration of a firewall", "accessLevel": "Write", "resourceTypes": [ { "name": "Firewall", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatefirewallpolicy": { "name": "UpdateFirewallPolicy", "description": "Grants permission to modify a firewall policy", "accessLevel": "Write", "resourceTypes": [ { "name": "FirewallPolicy", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "StatefulRuleGroup", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "StatelessRuleGroup", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "TLSInspectionConfiguration", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatefirewallpolicychangeprotection": { "name": "UpdateFirewallPolicyChangeProtection", "description": "Grants permission to add or remove firewall policy change protection for a firewall", "accessLevel": "Write", "resourceTypes": [ { "name": "Firewall", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updateloggingconfiguration": { "name": "UpdateLoggingConfiguration", "description": "Grants permission to modify the logging configuration of a firewall", "accessLevel": "Write", "resourceTypes": [ { "name": "Firewall", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updaterulegroup": { "name": "UpdateRuleGroup", "description": "Grants permission to modify a rule group", "accessLevel": "Write", "resourceTypes": [ { "name": "StatefulRuleGroup", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "StatelessRuleGroup", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatesubnetchangeprotection": { "name": "UpdateSubnetChangeProtection", "description": "Grants permission to add or remove subnet change protection for a firewall", "accessLevel": "Write", "resourceTypes": [ { "name": "Firewall", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "updatetlsinspectionconfiguration": { "name": "UpdateTLSInspectionConfiguration", "description": "Grants permission to modify a tls inspection configuration", "accessLevel": "Write", "resourceTypes": [ { "name": "TLSInspectionConfiguration", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] } }